Skip to content
OpenAdvisories

Package · Ubuntu

dojo

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.1
    CVE-2019-10785

    XSS in dojox due to insufficient escape in dojox.xmpp.util.xmlEncode

    dojox is vulnerable to Cross-site Scripting in all versions before version 1.16.1, 1.15.2, 1.14.5, 1.13.6, 1.12.7 and 1.11.9. This is due to dojox.xmpp.util.xmlEncode only encoding the first occurrence of each character, not all of them.

    dojo dojo dojox Debian Ubuntu npm
  • Medium 6.1
    CVE-2018-1000665

    Improper Neutralization of Input During Web Page Generation in Dojo Dojo Objective Harness

    Dojo Dojo Objective Harness (DOH) version prior to version 1.14 contains a Cross Site Scripting (XSS) vulnerability in unit.html and testsDOH/_base/loader/i18n-exhaustive/i18n-test/unit.html and testsDOH/_base/i18nExhaustive.js in the DOH that can result in V…

    dojo dojo org.dojotoolkit:dojo Debian Ubuntu Maven
  • Medium 6.1
    CVE-2018-6561

    dijit editor cross-site scripting vulnerability

    dijit.Editor in Dojo Toolkit 1.13 allows XSS via the onload attribute of an SVG element.

    dojo dojo dijit Debian Ubuntu npm